49 lines
1.5 KiB
YAML
49 lines
1.5 KiB
YAML
---
|
|
# Certbot auto-renew cron job configuration (for certificate renewals)
|
|
certbot_auto_renew: true
|
|
# Enable/Disable to use staging server instead of production (useful for testing)
|
|
certbot_testmode: false
|
|
# Enable/Disable delete certificates prior generating
|
|
certbot_delete_certs: false
|
|
# Parameters used when creating new Certbot certs.
|
|
certbot_create_if_missing: false
|
|
|
|
#
|
|
## Parameters DNS Plugins - You must set one certbot_dns_plugin
|
|
#
|
|
|
|
# Only for RFC 2136
|
|
certbot_dns_plugin: rfc2136
|
|
certbot_dns_target_server: 127.0.0.1
|
|
certbot_dns_target_server_port: 53
|
|
certbot_dns_tsig_keyname: certbot.
|
|
certbot_dns_key_secret: xwOGjKnek3ec15X4q4wM/2I180UXoMyN4INVhJNi8V9BCV+jMw2mXgZw/CSuxUT8C7NKKFs AmKd7ak51vWKgSl12ib86oQRPkpDjg==3pEsFF9Y7or8p3u1bO0FyrXw49TU=
|
|
certbot_dns_key_algorithm: HMAC-SHA512
|
|
|
|
# Others API (email and/or token) - cloudflare, luadns, digitalocean, etc
|
|
# certbot_dns_plugin: luadns
|
|
# certbot_dns_api_email: user@example.com
|
|
# certbot_dns_api_token: 31209dMAsdasijFkok312hiqdkp
|
|
# certbot_dns_credentials_custom_file: <file-path> # use when plugin is not directly supported by this role
|
|
|
|
certbot_admin_email: email@example.com
|
|
certbot_certs: []
|
|
# - email: janedoe@example.com
|
|
# domains:
|
|
# - example1.com
|
|
# - example2.com
|
|
# - domains:
|
|
# - example3.com
|
|
|
|
certbot_create_reload_services: [] # remove brackets if adding services
|
|
# - haproxy
|
|
# - nginx
|
|
# - apache
|
|
# - httpd
|
|
|
|
# Where to put Certbot when installing from source.
|
|
certbot_dir: /opt/certbot
|
|
|
|
# Certbot extra args
|
|
certbot_create_command_extra_options: ""
|